Description
An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access (such as WiFi credentials) to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does not impact the availability of the router's core services like WiFi network.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
NETGEAR RAX30
Default version status: unaffected
0 to < V1.0.9.92affected
NETGEAR RAX35
Default version status: unaffected
0 to < V1.0.10.72affected
NETGEAR RAX38
Default version status: unaffected
0 to < V1.0.6.106affected
NETGEAR RAX40
Default version status: unaffected
0 to < V1.0.6.106affected
NETGEAR RAXE300
Default version status: unaffected
0 to < V1.0.9.82affected
References
- https://www.netgear.com/support/product/rax30 ↗
- https://www.netgear.com/support/product/rax35 ↗
- https://www.netgear.com/support/product/rax38 ↗
- https://www.netgear.com/support/product/rax40 ↗
- https://www.netgear.com/support/product/raxe300 ↗
- https://kb.netgear.com/000070912/September-2026-NETGEAR-Security-Advisory ↗